top of page
D10S_hero_bkgd_v1_2026.png

Adopt

Adopt the Defensible 10 Standards

One engineering foundation.

Two adoption paths.

PROVE what you implement.

Adoption_hero1.png

Organizational Adoption

Adoption Requires the Whole Organization

Defensible 10 adoption is sponsored and supported by leadership, aligned with the business priorities, implemented with technical teams, and led by cybersecurity.

Adoption_Campaign_steps1.png

Two Pillar Model

One Engineering Foundation.
Two Adoption Paths.

Both adoption paths begin with the D10S Parent Standards.  The requirement flowdown layer varies with the operating environment.

Adoption_two_pillar1.png

PROVE Method

A Practical Method for Adopting D10S

The D10S PROVE Method helps cybersecurity teams from standards intent to engineering action through five clear steps.

Pick the Path

Choose your adoption approach

Refence Requirements

Align to D10S requirements

Operationalize

Implement with discipline

Verify and Validate

Test and confirm outcomes

Evidence

Document and prove results

Adoption Packet and Outcomes

Brief Your Teams.
Launch the Pilot.
Prove the Outcome.

The D10S Adoption Packet provides cybersecurity teams with editable materials to build leadership support, align business and technical stakeholders, and launch a pilot domain.

Adoption_packet2.png
D10S_ISAU_shield_logo_v2_2026_transp.png
Download Access Note

If your organization blocks file downloads, please contact us via the website or by email at info@isaunited.org.

Governance by:

ISAUnited-red_trimmed.png

Training by:

  • LinkedIn

Practitioner and Organizational Use

The Defensible 10 Standards (D10S) are published under a Creative Commons Attribution–NonCommercial 4.0 International License (CC BY-NC 4.0).


This license permits free use, adaptation, and internal implementation of the D10S by individual practitioners, educational institutions, and organizations for the purpose of research, training, architecture design, or internal security engineering.


Attribution to ISAUnited.org must be maintained in all uses, reproductions, or derivative works.

Commercial, Vendor, and Integration Use

The use, reproduction, or incorporation of the Defensible 10 Standards (D10S) or their content within commercial products, software, tooling, managed services, or for-profit offerings requires a separate commercial integration or redistribution license issued by the Institute of Security Architecture United (ISAUnited.org).


This includes but is not limited to:

  • Integration into commercial or subscription-based platforms or software tools

  • Use in vendor-branded frameworks or automated compliance products

  • Redistribution of modified or adapted versions for resale or commercial benefit

 

Requests for commercial licensing or integration agreements should be directed to:  info@isaunited.org

© 2026 The Defensible 10 Standards (D10S). Owned, operated, and maintained by the Institute of Security Architecture United (ISAUnited.org).

bottom of page